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Abstract 

The role of structural shielding mass in the design, verification, and in-flight performance of International 
Space Station (ISS), in both the natural and induced orbital ionizing radiation (IR) environments, is 
reported. 
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Introduction 


Orbital inclination (5 1 .6°) and altitude (nominally between 350 km and 400 km) determine the natural 
ionizing radiation environment of the International Space Station (ISS). The high inclination orbital 


environment exposes ISS to higher fluences of trappy 
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galactic cosmic rays (1-3) than would be the case in a lower inclination orbit with the same altitude range, 
largely as a result of the overall shape and magnitude of the geomagnetic field (1-3). In addition, an 
induced radiation environment is produced by inelastic collisions of primary galactic and solar cosmic ray 
nuclei, as well as trapped protons, with ISS structural materials (4-6). ISS structure provides a shielding 
depth (10g/cm 2 to 100 g/cm 2 ) substantially greater than that typical of unmanned spacecraft (< 1 g/cm 2 ) (6). 
ISS shielding depths are comparable to the inelastic collision lengths of energetic galactic cosmic rays 
(GCRs) (7) that pass through the geomagnetic field with minimal deflection (E > 10 GeV). Hadronic 
showers (secondary particle cascades consisting of energetic protons, neutrons, mesons and nuclear 
fragments) (8) initiated in ISS structure and shielding by inelastic collisions of minimally-deflected, high- 
energy GCRs are expected to make a larger contribution to the single event effect (SEE) and total ionizing 
dose environments than would be the case in less massive spacecraft (4-6). Similarly, the hadronic showers 
initiated by GCR collisions with air nuclei in Earth’s atmosphere produce secondary particle cascades (7, 8) 
leading to the well know Pfotzer radiation maximum, a concern for aircraft avionics, at altitudes near 20 
km (9, 10). The atmospheric shielding depth at 20 km altitude is about 50 g/cm 2 air. 


ISS must meet all performance requirements during continuous exposure to the nominal total ionizing dose 
(TED) and single event effect (SEE) environments for not less than 15 years. Periodically, ISS is also 
exposed to the extreme SEE environment produced by solar energetic particle events and must remain safe 
and functional during the events and recover to meet all performance requirements after the events. The 
performance of ISS hardware in the TID and SEE Environments must be verified by test and analysis prior 
to acceptance of hardware for flight. 

The ISS ionizing radiation environment for design and verification is defined in SSP-305 12-Rev. C, (1) 
while electronic parts testing method and analysis procedures are defined in SSP-305 13 Rev. B (2). Not all 
avionic equipment on ISS is subjected to the test and verification processes defined in SSP-305 12 and SSP- 
305 13. Some lower criticality equipment is accepted on the basis of an assembled article high-energy 
proton screening test (11). 

Structural Shielding Mass 


The ISS ionizing radiation requirements documents (1,2) contains no specific guidelines or 
recommendations on how to account for the effects of structural shielding mass on the SEE or TID 
environments, though look-up tables describing the effects of simple A1 shielding mass geometries are 
included. For purposes of design and verification, small shielding depth environments have been assumed 
for the purpose of estimating worst-case TID and SEE effects. TID and SEE susceptible equipment outside 
the pressurized elements is generally assumed to be at the center of an aluminum sphere, 0.13cm to 0.51cm 
thick (shielding depth of 0.35g/cm 2 to 1.5 g/cm 2 Al). The corresponding values used for sensitive 
equipment inside the pressurized elements are 1.3cm to 5.1cm (shielding depth of 3.5 g/cm 2 to 14 g/cm 2 


Al). 



The shielding depths usually assumed for ISS design and verification are substantially smaller than the 
actual shielding depths. For a typical point internal to the ISS pressurized elements, detailed Sector 
Shielding (12), and CAD based (13-15) analysis of the as-built ISS structure reveals a cumulative shielding 
depth distribution function with a median (50%) value of between 50 and 60 g/cm 2 and ranging from 10 to 
100 g/cm 2 at the 10% and 90% points respectively. Similarly, the cumulative shielding depth distribution 
of ISS avionics enclosures external to the pressurized elements typically ranges from 4 g/cm 2 to 20 g/cm 2 
with a median value of 10 g/cm 2 (15). It should be noted that no secondary particle design environment is 
specified SSP-305 12 Rev. C, though some analysis of secondary neutron and proton effects was completed 
for ISS optoelectronic devices labile to displacement damage produced by structural secondary and Earth- 
albedo neutrons (16). In the analysis presented below, the shielding mass distribution of avionics boxes 
mounted external to the pressurized elements are used with no additional contributions from the truss or 
pressurized element structure which either have relatively low mass and/or subtend only a small solid angle 
as viewed from the avionics box location. For avionics boxes mounted inside the pressurized elements, the 
avionics box mass distribution is simply added to the pressurized element mass distribution with no 
consideration of local geometry. 

The Radiation Design Environment - Total Ionizing Dose 


The ISS TID radiation environment is specified for 500 km at solar maximum and includes trapped protons 
defined per AP8MAX and trapped electrons defined per AE8MAX. The contributions of solar and galactic 
cosmic rays and secondary particles are not included. Shielding mass effects are included in the form of 
look-up tables for A1 shielding mass in two simple geometries, as determined with the well known 
Shieldose model combined with the SSP-305 12 natural environment (1). Dose estimates at specific points 
in more complex ISS configurations can be made by combining the CAD or Sector (12-15) based shielding 
mass distributions with the A1 shielding look-up tables in SSr-31512. Other minor contributions to TID, 
such as galactic or solar cosmic rays and x-rays, uncertainties in the trapped radiation models, contributions 
from SEP and other space weather events, and degradation rates of exposed labile materials, are addressed 
through the application of a recommended design margin of 2X applied to the 500 km design environment. 
The ISS radiation design environment represents a conservative, low cost solution for ISS hardware design 
and verification. The selection of 500 km as a design point altitude is, in itself, a worst-case assumption 
because ISS operates between 350 km and 460 km. TID rates increase by a factor of about 3X between 
300 and 500 km, largely as a result of the altitude structure of the SAA. 


On-Orbit Observations - Total Ionizing Dose 

ISS is performing well within expectations with respect to TED to EEE parts and materials interior to 
structural shielding. With few short term exceptions, ISS has been flying at altitudes between 350 and 400 
km during the past 6 years, well below the 500 km specified for the worst-case radiation design 
environment in SSP 30512. TED accumulated to date is well below the performance degradation threshold 
(1 krad) for even for the most sensitive ISS EEE parts and will remain so for the life of ISS. Ionizing 
radiation dose measurements, conducted within the habitable volume using thermo luminescent dosimeters 
and crew personal dosimeters, range from 5 to 12 pGy (tissue) (0.5 to 1.2 mrads (tissue)) per hour, 
depending on location in the habitable volume, corresponding to an annual dose range of 44 to 105 mGy 
(tissue) (4.4 to 10.5 rads (tissue)) (17-19). For most of the subject dosimetry measurement times, ISS has 
been flying at altitudes below 400 km during the declining phase of the last solar maximum. The variation 
in TED with location in the habitable volume is expected as a result of variations in the average line-of-sight 
shielding depth with location in ISS (12-15). Pre-flight worst-case estimates of TID internal to the ISS 
pressurized elements were less than 20 rads (Si)/year in all cases (12), about twice the maximum observed 
dose rates. 

The Radiation Design Environment - Single Event Effects 

Two different natural single event environments, for design and verification, are specified in SSP-305 12 
Rev. C (1). The nominal SEE environment is based on AP-8 solar minimum model for trapped protons and 
the CREME86, space weather index, M-4, solar minimum model for galactic cosmic rays. The nominal 
S EE environment is specified for a 500 km altitude at solar minimum so as to define a global worst-case 
environment for both trapped protons and GCR (1). The extreme SEE environment is also specified for 
500 km. The extreme SEE environment for ISS design and verification is based on the October 1989 SEP 



event; a 99 th percentile worst-case extreme SEE environment with respect to both energetic proton and 
energetic heavy ion fluxes (20-23). 

Methods for testing and analysis of EEE parts in support of ISS avionics performance verification in the 
nominal and extreme SEE environments are described in detail in SSP-30513 Rev. B (2). The Scott 
Effective Flux Approach (SCFA) (24), using a charged particle incident angle cut-off of 80° (normal 
incidence is 0°) and an LET cut-off of 1 10 MeVcm 2 /mg, is used to calculate worst case estimates of on- 
orbit upset rates for ISS design and verification purposes. Petersen (25) has shown that the ISS SCFA 
methods can overestimate or underestimate predicted on-orbit SEU rates compared to the Integral 
Rectangular Parallelepiped (IRRP) method for some classes of device geometry and relative radiation 
hardness. For the ISS 1Mx4 DRAM considered in detail below, an overestimation of about one order of 
magnitude is expected. In subsequent work, Peterson has demonstrated that a generalized Figure of Merit 
(FOM) approximation can produce useful SEU rate predictions (often comparable to much more complex 
detailed IRPP with shielding particle transport calculations) for a wide range of EEE part types, shielding 
mass environments and orbits (26). Barak, Reed and LaBel have analyzed this surprising result and 
established a sound theoretical basis for FOM (27). Below, SCFA and FOM SEU rate calculations are 
compared with observed on-orbit SEU rates for an ISS lx4M DRAM. 

Estimation of on-orbit SEU rates using either the SCFA or FOM requires heavy ion and proton test data in 
combination with the shielding mass distribution function. The DRAM die for the specific 1 Mx 4 DRAM 
(Texas Instruments 44400, 0.9 micron design rules, 13.7mm x 6 mm die size) used in the ISS multiplexer 
demultiplexer MDMs was selected on the basis of results of TID and SEE testing conducted by the 
European Space Agency (ESA) (28) on the essentially identical 4Mxl device. The normal-incidence heavy 
ion test data can be fit to the well known Weibull function, as shown below, allowing calculation of SEU 
cross section, a, as a function of ion effective linear energy transfer, L. 

ct(L) = a (s)(l - exp{-[(L - L 0 )/W] s }) where, 

a (s) = the saturated SEE cross-section at large values of L; a (s) = 3.00 x 10" 7 cm 2 /bit 
a (L) = the SEU cross-section for any value of L, 

L = the Linear Energy Transfer (LET) of the ion species in the beam, and 

L 0 , W, and S are empirical parameters, adjusted for a best fit to the observed data with 

Lo = 0.99 (MeV-cnr)/mg, W = 7.7 (MeV-cm 2 )/mg, and s = 1.3 

Proton testing yielded a threshold proton energy, Ep, equal to 30MeV, and a saturation cross section, o p , 
equal to 2.00 x 10‘ 13 cm 2 /bit (28). 

The shielding mass distribution functions as determined by the CAD method (12-15) for the ISS MDM 
DRAM reported on here is shown in Figure 1, and the physical locations of the external ISS MDMs are 
shown in Figure 2 and are calculated as described above, in the shielding mass section of this paper. 

The SEU FOM for the lx4M is calculated using the Weibull parameters derived from heavy ion test data as 
described in reference 26. 

FOM = a (s)/(Lo. 2 5 ) 2 , where 

a (s) = a (s) = 3.00 x 10‘ 7 cm 2 /bit; the limiting SEU cross-section at large values of L, and 
Lo .25 = Lo + W(0.288) 1/s = the LET value at a (L) = 0.25a (s). 

The upset rate for a particular orbit, and an assumed 100 mils (0.71g/cm 2 ) of A1 shielding, is then 
calculated using an orbit specific rate coefficient, C orb , that has the units upsets per bit-day (26) or. 

Rate (upsets/(bit day)) = FOM x C orb . 

The effect of shielding mass can be accounted for using the following very approximate equation (26), 
Corb/shid = 2C orb - 0.5C orb log(t), where t is a shielding thickness in mils. 



MDM Model Shielding Distribution 



Figure 1: MDM !Mx4 DRAM Structural Shielding Distributions. 



Figure 2: External MDM locations on ISS 

On-Orbit Observations - Single Event Effects 

The current configuration of the US segment of ISS (Flight/Stage 11) contains over 600 SEE susceptible 
avionics boxes and 3000 devices susceptible to SEE induced functional interrupt. During 4 years of flight, 
a total of 1 1 in-flight anomalies have been observed that may be SEE related. No destructive SEE events 
have been observed. None of the SEE related anomalies show the strong correlations with SEP events, 
flight through the SAA, or flight at high latitudes as predicted using the design environment in combination 
with the assumption of low shielding mass. 

On-Orbit ISS MDM SEE Performance 

The performance of the ISS command and data handling system MDM units is of special interest in light of 
the critical nature of MDM function. During the first 4 years of flight, the 16 MDMs in the US Lab module 
have displayed only 3 performance anomalies that may be attributable to SEE processes (see Figure 3). 

The three possible SEE performance anomalies showed no correlation with SEP events or flight through 
the South Atlantic Anomaly, though two of the three occurred at latitudes near +51 degrees. MDM 
performance anomalies are driven by functional lockup of 80386SX microprocessor and the 82370 
controller. An average US Lab MDM anomaly rate of 4.4E-3 per day (6 per 4 years) was predicted using 





ISS Anomalies 
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Figure 3: SEE anomaly candidates - 2001 to 2005 

MDM = multiplexer demultiplexer; APS =Automatic Payload Switch; ASBSP = Assembly and Contingency System Baseband Signal 
Processor; AUAI = ACS/UCS Audio Interface Unit 

an assumed shielding mass of 14 g/cm 2 and an assumed critical bit fraction of 20 percent of the total bit 
count in the critical devices. During the first 4 years of flight the observed anomaly rate for the 14 US Lab 
MDMs is 1.5 x IQ" 4 per day (3 per 4 3 'ears), a factor of 2 lower than the pre-flight verification estimate. No 
MDM anomalies were observed during any of the 23 > lOOMeV solar energetic particle events (extreme 
SEE environments) that occurred between April 2001 and June 2005. 

ISS MDMs are equipped with error detection and correction (ED AC) capability. The ED AC detects and 
corrects single-bit-per-data-word errors but only detects errors involving more than one bit per data word. 
No true, single word, double bit errors have been detected to date, though 13% of the DRAM SEU events 
observed to date involve 2 or more bits per 1 second telemetry reporting cycle. DRAM refreshes are 
initiated every 8 /rsec and take 8.2 seconds to complete so that at any time there are 125,000 refreshes in 
progress. The multiple upsets are most likely the result of a single charged particle event affecting 
physically adjacent DRAM cells that are not part of the same data word because the probability of two 
independent events in 1 sec is equal to the square of the single event rate and is therefore minute. 

DRAM SEUs for 6 of the external MDMs are plotted as a function of SEU latitude and longitude in Figure 
4. SEU data was collected for 155 calendar days, however, after accounting for occasional loss of 
telemetry signal (LOS) periods the actual SEU data collection time turns out to be 135 days. LOS is most 
likely between longitudes of +55 and +80 east as is apparent in Figure 4. This LOS region corresponds to a 
region where TDRSS-3 coverage cannot always be guaranteed due to scheduling issues. 

The expected increase in SEU counts in the South Atlantic Anomaly (SAA) and the high latitude or “horn” 
regions of the map are obvious. Table 1 shows the relative number of upsets in the SAA region, the high 
latitude horn regions, and the remainder of the orbital ground track, i.e. the mid latitude, non-SAA region. 
All 6 external MDMs are displaying nearly the same upset rate and very nearly the same distribution of 
upsets in the three major geographic regions, except for MDM S0-1, which shows a lower SEU rate in the 
SAA region and MDM Pl-1, which shows a significantly higher rate overall. With the exceptions of MDM 
Pl-1 and MDM S0-1 , the overall variation between MDMs is within that expected from Poisson process 
counting statistics. The SAA region makes a relatively small contribution to the total number of soft 
upsets, most of which occur in the horn and mid latitude regions. 




MDM Pl-1 
Type 4 

MDM PI =2 
Type-10 

MDM SO I 
Type-10 

MDM SO-2 
Type-10 

MDM SIM 
Type-10 

A/mn/T c-i jy 

HlX/iTX kJ JL Ji-i 

Type - 4 

73 

69 

41 

72 

81 

69 

129 

124 

121 

105 

97 

108 

97 

90 

96 

84 

78 

74 

299 

283 

258 

261 

256 

251 


SAA 73 | 69 41 [ 72 1 81 I 69 [ 405 

“Horns'’ 129 124 121 105 97 108 684 

Mid- 97 90 96 84 78 74 519 

Latitude 

Total 299 283 258 261 256 251 1608 

Table 1: ISS External MDM DRAM soft upsets corresponding to Figure 4; total count and breakdown by 
geographic region. [SAA region: Lat. 15 south to 45 south; Lon. 15 west to 70 west; North Horn: Lat. 35 to51.6 north: Lon. 20 
east through 0 to 160 west; South Horn: Lat. 35 to 51.6 south; Lon. 0 through 180 east to 135 west] 

Table 2 shows a comparison of the observed average (of all 6 external MDMs listed in Table 1 and Figure 
4) external MDM DRAM SEU rate for the 135 day data acquisition time with estimates made using the 
SEFA and FOM SEU rate methods. The median value of the shielding mass distribution function (10 
g/cm 2 Al) for external MDMs as shown in Figure 1 was used for both the SEFA and FOM estimates. The 
SEFA method overestimates the rate by a factor of 13, close to the one order of magnitude overestimate 
expected from inspection of Figure 5 of Reference 25, given the DRAM the heavy ion cross section and 
sensitive volume depth. The FOM method is in remarkably good agreement with the observed rate, 
overestimating by only a factor of 3.3 using the median shielding mass. 



SEFA SEU Count FOM SEU Count 

10g/cm 2 Shielding 10g/cm 2 Shielding 

(SEU/ 135 days) (SEU/135 days) 


3574 949 


Table 2: ISS External MDM DRAM soft upsets; a comparison of on-orbit rates with predictions of SEFA 
and FOM models 


Average on-orbit SEU Count per MDM 
10 g/cm 2 median shielding 
(SEU/135 days) 


268 ± 17 



Table 3 shows a comparison of the observed on-orbit rates for internal and external MDMs along with 
SEFA and FOM estimates for the corresponding shielding mass. Obviously the SEFA and FOM methods 
are underestimating the rates by overestimating the mitigating effects of shielding mass when median 
shielding mass is used as the basis of estimate. Both the SEFA and FOM methods produce much better 
agreement with the observed rates when rates are calculated using the shielding mass distribution function 
instead of the median value of the distribution as is shown in Table 4, even though neither approach takes 















secondary particle production in shielding into account. The improved agreement is largely a result of 
consistent overestimation of SEU rates for the lower mass end of the shielding mass distribution function. 


MDM: Median Shielding 

On-orbit SEU Count 

SEFA SEU Count 

FOM SEU Count 

(Fig.l) 

SEU/238 days) 

(SEU/238 days) 

(SEU/238 days) 

Lab-1: 40 g/cm 2 

488 ±22 

287 

83 

Lab-3: 40 g/cm 2 

490 ±22 

287 

83 

T>1 J), 1 (\crfrm 2 

536 ± 23 


1647 
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488 ± 22 

6202 

1647 


Table 3: Effects of median shielding mass: ISS Internal External MDM DRAM soft upset rates (corrected 
for multiple bit errors) and comparison of on-orbit rates with predictions of SEFA and FOM models using 
median shielding values for estimate 


MDM 

On-orbit SEU Count 
SEU/238 days) 

SEFA SEU Count 
(SEU/238 days) 

FOM SEU Count 
(SEU/238 days) 

Lab-1 

488 ± 22 

1560 

593 

Sl-1 

488 ± 22 

5721 

1626 


Table 4: Effects of integrating over the shielding mass: ISS Internal External MDM DRAM soft upset 
rates (corrected for multiple bit errors) and comparison of on-orbit rates with predictions of SEFA and 
FOM models 


Summary and Conclusions 

Detailed consideration of the effects of both the natural and induced ionizing radiation environment during 
ISS design, development, and flight operations has produced a safe, efficient manned space platform that is 
largely immune to deleterious effects of the LEO ionizing radiation environ m ent.. The assumption of a 
small shielding mass for purposes of design and verification has been shown to be a valid worst-case 
approximation approach to design for reliability, though predicted dependences of SEE effects on latitude, 
longitude, SEP events, and spacecraft structural shielding mass are not observed. The FOM method over 
predicts the rate for median shielding masses of about 10g/cm 2 by only a factor of 3, while the SEFA 
method overestimated by about one order of magnitude as expected. The IRPP, SEFA, and FOM methods 
for estimating on-orbit SEU rates all utilize some version of the CREME-96 treatment of energetic particle 
interaction with structural shielding, which has been shown to underestimate the production of secondary 
particles in heavily shielded manned spacecraft (4-6 and 29-31). The need for more work directed to 
development of a practical understanding of secondary particle production in massive structural shielding 
for SEE design and verification is indicated. In contrast, total dose estimates using CAD based shielding 
mass distributions functions and the Shieldose Code provided a reasonable accurate estimate of 
accumulated dose in Grays internal to the ISS pressurized elements, albeit as a result of using worst-on- 
worst case assumptions (500 km altitude x 2) that compensate for ignoring both GCR and secondary 
particle production in massive structural shielding. 
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